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Abstract 

Threats on the stabihty of a financial system may severely affect the functioning of the entire econ- 
omy, and thus considerable emphasis is placed on the analyzing the cause and effect of such threats. The 
financial crisis in the current and past decade has shown that one important cause of instability in global 
markets is the so-called financial contagion, namely the spreadings of instabilities or failures of individ- 
ual components of the network to other, perhaps healthier, components. This leads to a natural question 
of whether the regulatory authorities could have predicted and perhaps mitigated the current economic 
crisis by effective computations of some stability measure of the banking networks. Motivated by such 
observations, we consider the problem of defining and evaluating stabilities of both homogeneous and 
heterogeneous banking networks against propagation of synchronous idiosyncratic shocks given to a 
subset of banks. We formalize the homogeneous banking network model of Nier et al. [43] and its cor- 
responding heterogeneous version, formalize the synchronous shock propagation procedures outlined 
in [22,43], define two appropriate stability measures and investigate the computational complexities of 
evaluating these measures for various network topologies and parameters of interest. Our results and 
proofs also shed some light on the properties of topologies and parameters of the network that may lead 
to higher or lower stabilities. 

1 Introduction and Motivation 

In market-based economies, financial systems perform important financial intermediation functions of bor- 
rowing from surplus units and lending to deficit units. Financial stability is the ability of the financial 
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October 3-4, 2011, Fields Institute, Toronto, Canada, and at the Mathematical Finance theme, 2012 Annual Meeting of the Canadian 
Applied and Industrial Mathematics Society, July 24-28, 2012. 
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systems to absorb shocks and perform its key functions, even in stressful situations. Threats on the stabil- 
ity of a financial system may severely affect the functioning of the entire economy, and thus considerable 
emphasis is placed on the analyzing the cause and effect of such threats. The concept of instability of a 
market-based financial system due to factors such as debt financing of investments can be traced back to 
earlier works of the economists such as Irving Fisher [26] and John Keynes [34] during the 1930's Great 
Depression era. Subsequently, some economists such as Hyman Minsky [41] have argued that: 

Such instabilities are inherent in many modem capitalist economies. 

In this paper, we investigate systemic instabiUties of the banking networks, an important component of 
modem capitaUst economies of many countries. The financial crisis in the current and past decade has shown 
that an important component of instability in global financial markets is the so-called financial contagion, 
namely the spreadings of instabilities or failures of individual components of the network to other, perhaps 
healthier, components. The general topic of interest in this paper, motivated by the global economic crisis in 
the current and the past decade, is the phenomenon of financial contagion in the context of banking networks, 
and is related to the following natural extension of the question posed by Minsky and others: 

• What is the true characterization of such instabilities of banking networks, i.e., 

- Are such instabilities systemic, e.g., caused by a repeal of Glass-Steagall act with subsequent 
development of specific properties of banking networks that allowed a ripple effect [12]? 

- Or, are such instabilities caused just by a few banks that were "too big to fail" and/or "a few 
individually greedy executives" ? 

To investigate these types of questions, one must first settle the following issues: 

• What is the precise model of the banking network that is studied? 

• How exactly failures of individual banks propagated through the network to other banks? 

• What is an appropriate stability measure and what are the computational properties of such a measure? 

As prior researchers such as Allen and Babus [1] pointed out,graph-theoretic concepts provide a conceptual 
framework within which various patterns of connections between banks can be described and analyzed in a 
meaningful way by modeling banking networks as a directed network in which nodes represent the banks 
and the links represent the direct exposures between banks. Such a network-based approach to studying 
financial systems is particularly important for assessing financial stability, and in capturing the externali- 
ties that the risk associated with a single or small group of institutions may create for the entire system. 
Conceptually, Unks between banks have two opposing effects on contagion: 

• More interbank Unks increase the opportunity for spreading failures to other banks [29]: when one 
region of the network suffers from a crisis, another region also incurs a loss because their claims on 
the troubled region fall in value and, if this spillover effect is strong enough, it can cause a crisis in 
adjacent regions. 

• More interbank links provide banks with a form of coinsurance against uncertain Uquidity flows [2], 
i.e., banks can insure against the Uquidity shocks by exchanging deposits through Unks in the network. 
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2 The Banking Network Model 



2.1 Rationale Behind the Model 

As several prior researchers such as [1,22,36,43] have already commented, graph-theoretic frameworks 
may provide a powerful tool for analyzing stability of banking and other financial networks. We provide 
and use a mathematically precise abstraction of a banking network model as outlined in [43] and elsewhere. 
The same or very similar version of the graph-theoretic loss propagation model used in this paper has 
also been extensively used by prior researchers in finance, economics and banking industry to study 
various properties and research questions involving banking systems similar to what is studied in this 
paper (e.g., see [5, 17, 28, 42, 46], to name a few). As commented by researchers such as [5, 43]: 

the modelling challenge in studying banking networks lies not so much in analyzing a model 
that is flexible enough to represent all types of insolvency cascades, but in studying a model that 
can mimic the empirical properties of these different types of networks. 

A loss propagation model such as the one discussed here and elsewhere such as in [5, 17,28,42,46] con- 
ceptualises the main characteristics of a financial system using network theory by relating the cascading 
behavior of financial networks both to the local properties of the nodes and to the underlying topology of 
the network, allowing us to vary continuously the key parameters of the network. 



2.2 Homogeneous Networks: Balance Sheets and Parameters for Banks 

We provide a precise abstraction of the model as outlined in [43] which builds up on the works of Eboli [22]. 
The network is modeled by a weighted directed graph G = (y,F) oi n nodes and m directed edges, where 
each node v G V corresponds to a bank (Bankv) and each directed edge (v, v') G F indicates that Banky has 
an agreement to lend money to Banky'. Let degjj,(v) and degom(v) denote the in-degree and the out-degree 

of node v. The model has the following parameters: 

E = total external asset, / = total inter-bank exposure, A = I + E = total asset 
[0, 1] 9 7 = percentage of equity to asset, w = w{e) = ^ = weight of edge eGF, ^ = severity of shock (1 > 3> > 7) 

Now, we describe the balance sheet for a node v eV (i.e., for Banky): 



Assets 






Liabilities 


ly = degQm(v) xw — interbank asset 




bv 


= degijj(v) X w = interbank borrowing 








= net worth (equity) 


= share of total external asset E 






= customer deposits 


ay = ev + iy = + f = total asset 




£\! by ~\~ Cy ~\~ dy 


= total liability 


fly = 


ty (balance sheet equation) 





Note that the homogeneous model is completely described by the 4-tuple of parameters (G, /, /,£■). 
2.3 Balance Sheets and Parameters for Heterogeneous Networks 

The heterogeneous version of the model is the same as its' homogeneous counterpart as described above, ex- 
cept that the shares of interbank exposures and external assets for different banks may be different. Formally, 
the following modifications are done in the homogeneous model: 
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• w{e) > denotes the weight of the edge e EE along with the constraint that LeeF^(^) = ^• 

• lv= Le={vy)eFw{e), and = Ze={v',v)eFwi^)- 

• = {by — ly) + CCyX {E — Y^v^vi^v ~ ^v)) soHie OCy > along with the constraint Y^vev OLy = ^- 
Since Evev (^v — h) = 0> this gives ey = {by — ly) + CCyE. Consequently, Oy now equals by + CCyE. 



t = i;V^y,{i)=v 

{* start the shock at ? = 1 on nodes in Vshock *) 

Vv€V: ifveVshock thencv(l) =Cv-^>ev ehecy{l)=Cy 

(* shock propagation at times t = 2,3,...,T *) 
while (?<r) A (Vaiive(0 ^0) do 

(* transmit loss to next time step *) 

V«€WO:c«(^ + l) = c«W- I "^^ill'fj;, 

v: Cv(O<0 & (M,v)€£alive(0 ^^^i'^^^' ^> 

(* remove Banky from network if it is to fail at this step *) 

Valive(f + 1) = Valive(0 \ { V | V G ValivelO & Cy{t) < } 
t = t + l 

endwhUe 



Table 1 : Discrete-time idiosynchratic shock propagation for T steps. 



Denoting the m-dimensional vector of w{e)'s by w and the n-dimensional vector of Oy's by a, the heteroge- 
neous model is completely described by the 6-tuple of parameters {G,Y,I,E,w,a,}. 

2.4 Idiosyncratic Shock [22, 43] 

As in [43], our initial failures are caused by idiosyncratic shocks which can occur due to operations risks 
(frauds) or credit risks, and has the effect of reducing the external assets of a selected subset of banks 
perhaps causing them to default. While aggregated or correlated shocks affecting all banks simultaneously 
is relevant in practice, idiosyncratic shocks are a cleaner way to study the stability of the topology of the 
banking network. Formally, we select a non-empty subset of nodes (banks) C Vshock ^ V . For all nodes 
V G Vshock, we simultaneously decrease their external assets from Cy by Sy = ^Cy, where the parameter 4> G 
(0, 1] determines the "severity" of the shock. As a result, the new net worth of Bankv becomes c'y = Cy — Sy. 
The effect of this shock is as follows: 

• If > 0, Banky continues to operate but with a lower net worth of c(,. 

• If < 0, Bankv defaults {i.e., stops functioning). 
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2.5 Propagation of an Idiosyncratic Shock [22, 43] 

We use the notation Cy{t) to denote Cy at time t, and to denote any t >tQ. Let VaUve(?) C y be the set 
of nodes that have not failed at time t and let Gaiive(^) = (^aiive(^))£^aUve(^)) be the corresponding node- 
induced subgraph of G at time t with Aeg-^^{v,t) and degom(v,f) denote the in-degree and out-degree of a 
node V G Vaiive(^) in the graph Ga]ive(?)- hi a continuous-time model, the shock propagates as follows: 

• VaUve(l) = y, Cv(l) = Cv - if V G Vshock, and Cv(l) = Cv otherwise. 

• If a banks equity ever becomes negative, it fails subsequently, /.e., Vfo > 1 : Cv(fo) < =^ v ^ ^aiivel^o^)- 

• A failed bank Banky at time t = tQ affects the net worth (equity) of all banks that gave loan to Banky 
in the following manner. For each edge (m, v) G £'aiive(fo) in the network at time /q, the equity c„(?()) is 
decreased by an amount^ of Thus, the shock propagation is defined by the following 
differential equation: 

v:c.(t)<0&(u,v)eEaUve(t) ^^ginl^'lJ 

A discrete-time version of the above can be obtained by the obvious method of quantizing time and replacing 
the partial differential equations by "difference equations". With appropriate normalizations, the discrete- 
time model for shock propagation is described by a synchronous iterative procedure shown in Table 1 where 
t = 1,2, . . . , r denotes the discrete time step at which the synchronous update is done {T < n). 

Parameter Simplification We can assume without loss of generality that in the homogeneous shock prop- 
agation model w = 1. To observe this, if w = I/m ^ 1, then we can divide each of the quantities iv, b^, E and 

dy by w; it is easy to see that the outcome of the shock propagation procedure in Table 1 remains the same. 
Moreover, we will ignore the balance sheet equation since dy has no effect in shock propagation. 

3 Related Prior Works on Financial Networks 

Although there is a large amount of literature on stabihty of financial systems in general and banking systems 
in particular, much of the prior research is on the empirical side or applicable to small-size networks. Two 

main categories of prior researches can be summarized as follows. The particular model used in this paper 
is the model of Nier et al. [43]. As stated before, definition of a precise stability measure and analysis of its 
computational complexity issues for stabihty calculation were not provided for these models before. 

Network formation Babus [7] proposed a model in which banks form hnks with each other as an in- 
surance mechanism to reduce the risk of contagion. In contrast, Castighonesi and Navarro [13] studied 
decentralization of the network of banks that is optimal from the perspective of a social planner. In a setting 
in which banks invest on behalf of depositors and there are positive network externalities on the investment 
returns, fragility arises when "not sufficiently capitalized" banks gamble with depositors' money. When the 
probability of bankruptcy is low, the decentralized solution well-approximates the first objective of Babus. 

'if I Cv(fo) I > K then the depositors incur a loss ofbv—\ Cv(fo) |. but this model assumes that all the depositors are insured for 
their deposits, e.g., in United States the Federal Deposit Insurance Corporation provides such an insurance up to a maximum level. 
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Contagion spread in networks Although ordinarily one would expect the risk of contagion to be larger in 
a highly interconnected banking system, some empirical simulations indicate that shocks have an extremely 
complex effect on the network stabiUty in the sense that higher connectivity among banks may sometimes 
lead to lower risk of contagion. 

Allen and Gale [2] studied how a banking system may respond to contagion when banks are connected 
under different network structures, and found that, in a setting where consumers have the liquidity prefer- 
ences as introduced by Diamond and Dybvig [20] and have random liquidity needs, banks perfectly insure 
against liquidity fluctuations by exchanging interbank deposits, but the connections created by swapping de- 
posits expose the entire system to contagion. Allen and Gale concluded that incomplete networks are more 
prone to contagion than networks with maximum connectivity since better-connected networks are more 
resiUent via transfer of proportion of the losses in one bank's portfolio to more banks through interbank 
agreements. Freixas et at. [27] explored the case of banks that face liquidity fluctuations due to the uncer- 
tainty about consumers withdrawing funds. Gai and Kapadia [29] argued that the higher is the connectivity 
among banks the more will be the contagion effect during crisis. Haldane [31] suggested that contagion 
should be measured based on the interconnectedness of each institution within the financial system. Liedorp 
et al. [39] investigated if interconnectedness in the interbank market is a channel through which banks affect 
each others riskiness, and argued that both large lending and borrowing shares in interbank markets increase 
the riskiness of banks active in the dutch banking market. 

Dasgupta [19] explored how linkages between banks, represented by cross-holding of deposits, can 
be a source of contagious breakdowns by investigating how depositors, who receive a private signal about 
fundamentals of banks, may want to withdraw their deposits if they believe that enough other depositors will 
do the same. Lagunoff and Schreft [38] considered a model in which agents are linked in the sense that the 
return on an agents' portfolio depends on the portfoUo allocations of other agents. lazzetta and Maima [32] 
used network topology analysis on monthly data on deposits exchange to gain more insight into the way a 
liquidity crisis spreads. Nier et al. [43] explored the dependency of systemic risks on the structure of the 
banking system via network theoretic approach and the resilience of such a system to contagious defaults. 
Kleindorfer et al. [36] argued that network analyses can play a crucial role in understanding many important 
phenomena in finance. Corbo and Demange [18] explored, given the exogenous default of set of banks, the 
relationship of the structure of interbank connections to the contagion risk of defaults. Babus [8] studied 
how the trade-off between the benefits and the costs of being finked changes depending on the network 
structure, and observed that, when the network is maximal, liquidity can be redistributed in the system to 
make the risk of contagion minimal. 

4 The Stability and Dual Stability Indices 

A banking network is called dead if all the banks in the network have failed. Consider a given homogeneous 
or heterogeneous banking network {G,y,I,E,f^) or {G,y,I,E,f^,yi,a). For C V' C V, let 



infl(V') = { V G V I V fails if all nodes in V' are shocked } 
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The Stability Index The optimal stability index of a network G is defined as 



Sr(G,r) = SI(G,Vshock,r) =min{SI(G,V',r)} 



For estimation of this measure, we assume that it is possible for the network to fail, i.e., SI* (G, T) < oo. Thus, 
< SI*(G,r) < 1, and the higher the stability index is, the better is the stabiUty of the network against an 
idiosyncratic shock. We thus arrive at the natural computational problem STABro. We denote an optimal 
subset of nodes that is a solution of Problem StaBjo by Vshock. i-^-, S\*{G,T) = S\{G,Vshock,T). Note that 
if r > « then the STABrd) finds a minimum subset of nodes which, when shocked, will eventually cause the 
death of the network in an arbitrary number of time steps. 



Input: a banking network with shocking parameter <J>, 

and an integer J > 1 
Valid solution: A subset V C V such that S\{G,V' ,T) < oo 
Objective: minimize \V'\ 


Input: a banking network with shocking parameter <J>, 

and two integers T,k> \ 
Valid solution: A subset V' C y such that V' = fc 
Objective: maximize infl(y')/jf 


Stability of banking network ( SxABr,* ) 


Dual Stability of banking network (DuAL-STABr,*,^) 



The Dual Stability Index Many covering-type minimization problems in combinatorics have a natural 
maximization dual in which one fixes a-priori the number of covering sets and then finds a maximum number 
of elements that can be covered with these many sets. For example, the usual dual of the minimum set 
covering problem is the maximum coverage problem [35]. Analogously, we define a dual stability problem 
Dual- S TAB 7- $ ,^. The dual stability index of a network G can then be defined as 

DSI*(G,r,K:)= max |infl(y')/'«^l 

V'CV:\V'\=K^ ' 

The dual stability measure is of particular interest when SI* (G,r) = oo, i.e., the entire network cannot be 
made to fail. In this case, a natural goal is to find out if a significant portion of the nodes in the network can 
be failed by shocking a limited number of nodes of G; this is captured by the definition of DSI* (G, T, k). 

Violent Death vs. Slow Poisoning In our results, we distinguish two cases of death of a network: 

violent death {T = 2) The network is dead by the very next step after the shock. 

slow poisoning (any T >2) The network may not be dead immediately but dies eventually. 

4.1 Rationale Behind the Stability Measures 

Although it is possible to think of many other alternate measures of stability for networks than the ones 
defined in this paper, the measures introduced here are in tune with the ideas that references [22, 43] directly 
(and, some other references such as [28, 46] implicitly) used to empirically study their networks by shocking 
only a few (sometimes one) node. Thus, a rationale in defining the stabihty measures in the above manner 
is to follow the cue provided by other researchers in the banking industry in studying models such as in 
this paper instead of creating a completely new measure that may be out of sync with ideas used by prior 
researchers and therefore could be subject to criticisms. 
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5 Comparison with Other Models for Attribute Propagation in Networks 



Models for propagation of beneficial or harmful attributes have been in- 
vestigated in the past in several other contexts such as influence maxi- 
mization in social networks [11, 14, 15, 33], disease spreading in urban 
networks [16,23,24], and percolation models in physics and mathemat- 
ics [45]. However, the model for shock propagation in financial network ^ — ^-^ 7 = 0.1 £" = 5 
discussed in this paper h fundamentally very different from all these mod- Figure 1: A homogeneous net- 
els. Some distinguishing features of our model include: work used in the discussion in 

Section 5. 

(a) Almost all of these models include a trivial solution in which the at- 
tribute spreads to the entire network if we inject each node individually with the attribute. This is not the 
case with our model: a node may not fail when shocked, and the network may not be dead if all nodes are 
shocked. For example, consider the network in Fig. l(i). 

• Suppose that all the nodes are shocked. Then, the following events happen. 

- Node a (and similarly node b) fails at ? = 1 since (degi„(a) + > 7(degjjj(a) + f ). 

- Node c also fails at ? = 1 since ^ (degi„(c) - degout(c) + f ) = 0.4 > 7(degi„(c) + f ) = 0.3. 

- Node d (and similarly node e) do not fail at ? = 1 since <I> [-A.eg^^^{d) + 1) = < 7x f = 0.1 
and its equity stays at 0.1 — = 0.1. 

- Ait = 2, node d (and similarly node e) receives a shock from node c of the amount ^■'^^■'^ = 
0.05 < 0.1. Thus, nodes d and e do not fail. Since no new nodes fail during ? > 2, the network 
does not become dead. 

• However, suppose that only nodes a and b are shocked. Then, the following events happen. 

- Node a (and similarly node b) fails at ? = 1 since «I> (degjj,(a) -I- f )=0.8 > y (degjji(a) -I- f ) =0.2. 

- At ? = 2, node c receives a shock of the amount 2 x (0.8 - 0.2) = 1 .2 > y (degi„(c) + f ) = 0.3. 
Thus, node c fails at ? = 2. 

- At f = 3, node d (and similarly node e) receives a shock of the amount ^-^-^-^ = 0.45 > y x j = 
0. 1 . Thus, both these nodes fail at ? = 3 and the entire network is dead. 

As the above example shows, if shocking a subset of nodes makes a network dead, adding more nodes to this 

subset may not necessarily lead to the death of the network, and the stability measure is neither monotone 
nor sub-modular. Similarly, it is also possible to exhibit banking networks such that to make the entire 
network fail: 

• it may be necessary to shock a node even if it does not fail since shocking such a node "weakens" it 
by decreasing its equity, and 

• it may be necessary to shock a node even if it fails due to shocks given to other nodes. 

(b) The complexity of the computational aspects of many previous attribute propagation models arise due 
to the presence of cycles in the graph; for example, see [14] for polynomial-time solutions of some of these 
problems when the underlying graph does not have a cycle. In contrast, our computational problems are 
may be hard even when the given graph is acyclic; instead, a key component of computational complexity 
arises due to two or more directed paths sharing a node. 
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Network type, 
result type 



Stability SI*(G,r) 



bound, assumption (if any), 
corresponding tlieorem 



Dual Stability DSI*(G, T, ic) 
bound, assumption (if any), 
corresponding theorem 



T = 2 

approximation hardness 



(l-e)liin, 
NP (£ DTIME(n'°8'°8"), Theorem 8.1 



Homo- 
geneous 



T = 2, approximation ratio 



O log 



7 (3) -7) \E-(^\ 



Theorem 9.1 



Acyclic, V T > 1, 
approximation hardness 



APX-hard, Theorem 10.1 



(l-e-' + e)-', 
P NP, Theorem 15.1(a) 



In-arborescence, 
V T > 1, exact solution 



O (n^) time, every node fails 
when shocked. Theorem 11.1 



O (n^) time, every node fails 
when shocked. Theorem 15.1(b) 



Acyclic, V T > 1, 
approximation hardness 



(l-e)lnn, NP <£ DTIME(n'°si°8"), 
Theorem 12.1 



(l_e-i + £)-!, 
P ^ NP, Theorem 15.1(a) 



Hetero- 
geneous 



Acyclic, T = 2, approximation hardness 



n^, assumption Theorem 16.1 



Acyclic, V T > 3, 
approximation hardness 



2W '■>, NP<2DTIME(nP°W°8")), 
Theorem 14.1 



Acyclic, T = 2, 
approximation ratio ^ 



n E w, 



max '•'mm 



*-* "(|) 7 (<t> - 7) £ Wmin «min Wm 

Theorem 13.1 



*See Theorem 13.1 for definitions of some parameters in the approximation ratio. 
+See page 40 for statement of assumption (*), which is weaker than the assumption P ^ NP. 
Table 2: A summary of our results; e > is any arbitrary constant and < 5 < 1 is some constant. 



6 Overview of Our Results and Their Implications on Banking Networks 

Table 2 summarizes our results, where the notation poly (xi ,X2, . . . ,Xk) denotes a constant-degree polynomial 
in variables xi,X2, . ■ . ,Xk- Our results for heterogeneous networks show that the problem of computing 
stability indices for them is harder than that for homogeneous networks, as one would naturally expect. 

6.1 Brief Overview of Proof Techniques 
6.1.1 Homogeneous Networks, StaBj-,^ 

T = 2, approximation hardness and approximation algoritlim The reduction for approximation hard- 
ness is from a corresponding inapproximability result for the dominating set problem for graphs. The loga- 
rithmic approximation almost matches the lower bound. Even though this algorithmic problem can be cast 
as a covering problem, one cannot explicitly enumerate exponentially many covering sets in polynomial 
time. Instead, we reformulate the problem to that of computing an optimal solution of a polynomial-size 
integer linear programming (ILP), and then use the greedy approach of [21] for approximatation. A careful 
calculation of the size of the coefficients of the ILP ensures that we have the desired approximation bound. 

Any r > 1, approximation hardness and exact algorithm The APX-hardness result, which holds even 
if the degrees of all nodes are small constants, is via a reduction from the node cover problem for 3-regular 
graphs. Technical complications in the reduction arise from making sure that the generated graph instance 
of StaBj- $ is acyclic, no new nodes fail for any t>3, but the network can be dead without each node being 
individually shocked. If the network is a rooted in-arborescence and every node can be individually shocked 
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to fail, then we design an O (n^) time exact algorithm via dynamic programming; as a by product it also 
follows that the value of the stabiUty index of this kind of network with bounded node degrees is large. 

6.1.2 Homogeneous Networks, Dual-StaB7-,,i>,k: 

Any r, approximation hardness and exact algorithm For hardness, we translate a lower bound for 
the maximum coverage problem [25]. The reduction relies on the fact that in dual stability measure every 
node of the network need rwt fail. If the given graph is a rooted in-arborescence and every node can be 
individually shocked to fail, we provide an O (n^) time exact algorithm via dynamic programming. 

6.1.3 Heterogeneous Networks, StaRt,^ 

Any T, approximation hardness The reduction is from a corresponding inapproximabihty result for the 
minimum set covering problem. Unlike homogeneous networks, unequal shares of the total external assets 
by various banks allows us to encode an instance of set cover by "equahzing" effects of nodes. 

T = 2 The approximation algorithm uses linear program in Theorem 9. 1 with more careful calculations. 

Any T >2, approximation hardness This stronger poly-logarithmic inapproximabihty result than that in 
Theorem 12.1 is obtained by a reduction from MiNREP, a graph-theoretic abstraction of two prover multi- 
round protocol for any problem in NP. Many technical complications in the reduction, culminating to a set 
of 22 symbolic linear equations between the parameters that we must satisfy. Intuitively, the two provers in 
MiNREP correspond to two nodes in the network that cooperate to fail to another specified set of nodes. 

6.1.4 Heterogeneous Networks, Dual-StaB2,<i.,ic, approximation hardness The reduction for this 
stronger inapproximabihty result is from the densest hyper-graph problem. 

6.2 Implications of Our Results on Banking Networks 
6.2.1 Effects of Topological Connectivity 

Though researchers agree that the connectivity of banking networks affects its stability [2, 29], the conclu- 
sions drawn are mixed, namely some researchers conclude that lesser connectivity imphes more susceptibil- 
ity to contagion whereas other researchers conclude in the opposite. Based on our results and their proofs, 
we found that topological connectivity does play a significant role in stability of the network in the following 
complex manner. 

Even acyclic networks display complex stability behavior: Sometimes a cause of the instability of 
a banking network is attributed to cyclical dependencies of borrowing and lending mechanisms among 
major banks, e.g., banks vi, V2 and V3 borrowing from banks V2, V3 and vi, respectively. Our results 
show that computing the stabihty measures may be difficult even without the presence of such cycles. 
Indeed, larger inapproximabihty results, especially for heterogeneous networks, are possible because 
slight change in network parameters can cause a large change in the stability measure. On the other hand, 
acyclic small-degree rooted in-arborescence networks exhibit higher values of the stability measure, e.g., 
if the maximum in-degree of any node in a rooted in-arborescence is 5 and the shock parameter 4> is no 
more than twice the value of the percentage of equity to assets 7, then by Theorem 11.1 S\*{G,T) > 0.1. 
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Intersection of borrowing chains may cause lower stability: By a borrowing chain we mean a directed 

path from a node vi to another node V2, indicating that bank V2 effectively borrowed from bank vi through 
a sequence of successive intermediaries. Now, assume that there is another directed path from vi to 
another node V3. Then, failure of V2 and V3 propagates the resulting shocks to vi and, if the shocks arrive 
at the same step, then the total shock received by bank vi is the addition of these two shocks, which in 
turn passes this "amplified" shock to other nodes in the network. 

Based on these kinds of observations, it can be reasonably inferred that homogeneous networks with topolo- 
gies more like a small-degree in-arborescence have higher stabilities, whereas networks of other types of 
topologies may have lower stabilities even if the topologies are acyclic. For example, as we observe later, 
when deg™""" = 3, 7 = 0.1 and <I> = 0.15, we get S\*{G, T) > 0.22 and the network cannot be put to death 
without shocking more than 22% of the nodes. 

6.2.2 Effects of Ratio of External to Internal Assets (E/I) and percentage of equity to assets (7) for 
Homogeneous Networks 

As our relevant results and their proofs show, lower values of E/I and 7 may cause the network stability to be 
extremely sensitive with respect to variations of other parameters of a homogeneous network. For example, 

in the proof of Theorem 8.1 we have lim„^oo = lim„^t>o 7 = 0, leading to variation of the stability index 
by a logarithmic factor; however, in the proof of Theorem 10.1 we have ^// = 0.25 and 7 = 0.23 leading to 
much smaller variation of the stability index. 

6.2.3 Homogeneous vs. Heterogeneous Networks 

Our results and proofs show that heterogeneous networks of banks with diverse equities tend to exhibit wider 
fluctuations of the stability index with respect to parameters, e.g., Theorem 14.1 shows a poly logarithmic 
fluctuation even if the ratio E/I is large. 

7 Preliminary Observations on Shock Propagation 

Proposition 7.1. Let {G = {V,F),Y,p ,E) be the given (homogeneous or heterogeneous) banking network. 
Then, the following are true: 

(a) 7/'degQm(v) = 0/or some v G V, then node v must be given a shock (and, must fail due to this shock) for 

the entire network to fail. 

(b) Let a be the number of edges in the longest directed simple path in G. Then, no new node fails at any 

time t > a. 

(c) We can assume without loss of generality that G is weakly connected, i.e., the un-oriented version ofG 

is connected. 

Proof. 

(a) Since degQm(v) = 0, no part of any shock given to any other nodes in the network can reach v. Thus, the 
network of v, namely Cy = jav stays strictly positive (since 7 > 0) and node v never fails. 

(b) Let tiast be the latest time a node of G failed, and let V{t) be the set of nodes that failed at time t = 
1,2, .. . ,tiast- Then, V{l),V{2),. . . , V(tiast) is a partition of V. For every / = 1,2, .. . ,tiast — 1, add directed 
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edges (m, v) from a node u G V{i) to a node v G V(j + 1) if m was last node that transmitted any part of the 
shock to V before v failed. Note that (m, v) is also an edge of G and for every node v G V (j + 1) there must 
be an edge (w, v) for some node u € V (/). Thus, G has a path of length at least tiast- 

(c) This holds since otherwise the stability measures can be computed separately on each weakly connected 
component. n 



8 Homogeneous Networks, StaB2,o, Logarithmic Inapproximability 

Theorem 8.1. SI*(G,2) cannot be approximated in polynomial time within a factor of {I — e) Inn, /or any 
constant e > 0, unless NP C DTIME (n'og'og"). 

Proof The dominating set problem for an undirected graph (DOMIN-SET) is defined as follows: given an 
undirected graph G = {V,F) with n = \V\ nodes, find a minimum cardinality subset of nodes V' GV such 
that every node in V\V' is incident on at least one edge whose other end-point is in V'. It is known that 
DOMIN-SAT is equivalent to the minimum set-cover problem under L-reduction [9], and thus cannot be 
approximated within a factor of (1 - £)ln?i unless NP C DTIME («i°gi°g") [25]. 

Consider an instance G = {V,F) of DOMIN-SET with n nodes and m edges, and let OPT denote the 
size of an optimal solution for this instance. Our (directed) banking network ^ = (T^,^) is obtained 
from G by replacing each undirected edge {u,v} by two directed edges (m,v) and (v,m). Thus we have 
< degi„(v) = dego„((v) < n for every node v G V. We set the global parameters as follows: E = lOn, 
y=n^^ and <I> = 1. 

For a node v, let Nbr(v) = {u\{u,v} ^ E] he the set of neighbors of v in G. We claim that if a node v is 
shocked at time t = 1, then all nodes in in {v} U Nbr(v) fail at time / = 2. Indeed, suppose that v is shocked 
at ? = 1 . Then, v surely fails because 

E 2 des- iv) + - 

^e, = degi„(v) - deg„„,(v) + - = 10 > - > " = y^v 

Now, consider t = 2 and consider a node v such that v has not failed but a node u G Nbr(v) failed at time 
t = 1. Then, node v surely fails because 

^ ^ mm{su,i -Cu,bu} _ min{a>g» - ya„,degin(M)} ^ ^ / j A 
"^"'^^ degij,(M,2) degin(M) |degij,(M)' J 

n 

Thus, we have a 1-1 correspondence between the solutions of DOMIN-SET and death of namely V' CV 
is a solution of DOMIN-SET if and only if shocking the nodes in V' makes ^ fail at time t = 2. □ 

9 Homogeneous Networks, StaB2,4>, Logarithmic Approximation 

Theorem 9.1. StaB2,$ admits a polynomial-time algorithm with approximation ratio 
^/ / n^E 
O (,y(4>-y)|£-0| 
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Proof. Suppose that Oe„ < for some node u&V. Then, there exists an optimal solution in which we do 
not shock the node u. Indeed, if u was shocked, the equity of u increases from c„ to c„ + | <I>e„ | and u does 
not propagate any shock to other nodes. Thus, if u still fails ait = 2, then it also fails at ? = 2 if it was not 
shocked. 

Let Vshock denote the set of nodes that we will select for shocking, and, for every node v e V, let 5v,u 

{max{0, 4>ev}, ifM = v 

min{4>ei, Cy, by} ^ jf > {u,v) G F. Then, our problem reduces to a 

degin(v) 
0, otherwise 
covering problem of the following type: 

find a minimum cardinality subset Vshock ^ V such that, for every node u, LveVshock^i'," ^ 

Note that we cannot even expUcitly enumerate, for a node u eV, all subsets V CV \ {u} such that 
T,vev'^v,u > c„, since there are exponentially many such subsets. Let the binary variable Xy G {0,1} be 
the indicator variable for a node v G V for inclusion in yshock- However, we can reformulate our problem as 
the following integer linear programming problem: 

minimize ^ Xy 

vev 

subject to Vm G V : Y,^v,uXv > Cu (1) 

v€V 

x„G{0,l} 

5 c 

Let ^ = min { min{5j,,v}) Cu }• We can rewrite each constraint ^5v,mXv > c^ as '^-jr-Xy > to ensure 

uev vev ' ' vev ^ ? 

that every non-zero entry is at least 1. Since the coefficients of the constraints and the objective function are 
all positive real numbers, (1) can be approximated by the greedy algorithm described in [21, Theorem 4.1] 
with an approximation ratio of 2 + Inn -)- In ^max^gy ILmev ^ }) • Now, observe that: 

min {5u,u} = min (degi^{u) - deg^^^iu) + -\\=£l( L^_^ | 
kgV uev I \ n J I \ n 

5„.„>0 5„,„>0 ^ ^ ^ ^ \ / 

minmin {5„v}=min min I - y) ( I + -^^^^2^] = a ~ 



5„„>0 $ev>Cv 



min{c„} = min I 7 ( degi„(M) + - ) I = H 
uev^ uev [ \ ™^ ^ nj ) \n 



^ = min{ minmin{5«,v}, minjcj } = min 



/YE' 

£"-<!> I (<I)-7)£' yE 



u€V vgv ' u€V \ \ n n n 



max V 5,„<nmax|(<D-7)fl + -— =0{n{^-y)E) 
and thus, maxygi/ ^uev ^ | = O ^poly ^n, * , 1 ^^1 ^ ^ , giving the approximation bound. 



□ 
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10 Homogeneous Networks, STABy^^, any T, APX-hardness 



Theorem 10.1. For any T, computing SI* (G, T) is APX-hard even if the banking network G is a DAG with 
degin(v) < 3 and degQut(v) < 2 for every node v. 

Proof We reduce the 3-MIN-NODE-COVER problem to StaBt^o- 3-MIN-NODE-COVER is defined as 
follows. We are given an undirected 3-regular graph G, i.e., an undirected graph G = {V,F) in which the 
degree of every node is exactly 3 (and thus |F| = 1.5|V|).A valid solution (node cover) is a subset of nodes 
y' C y such that every edge is incident to at least one node in V'. The goal is then to find a node cover 
y' C y such that \V' \ is minimized. This problem is known to be APX-hard [10]. 



V6 V5 



vi( 











, ^2,3 


3 


V2 V 



)V4 



G=iV,F) '^ = {f,f) 




sink 
nodes 



o o o o _ 

i/i U2' i4 "4 "5 "6 super-source nodes 



Figure 2: A 3-regular graph G = {V,F) and its corresponding banking network G= iV,F). 

Given such an instance G = {V,F) of 3-MIN-NODE-COVER, we construct an instance of the banking 
network ^ = (V^,7^) as follows: 

• For every node v,- G V, we have two nodes m,, u'j in and a directed edge («,-, m-). We refer to m- as a 
"super-source" node. 

• For every edge {v,-,vy} G F with i < j, we have a ("sink") node eij in and two directed edges 
{eij^Ui) and {eij,Uj) in For notational convenience, the node eij is also sometimes referred to as 
the node 

Thus, \V\ = 3.5 |y |, and I = 4 \V\. See Fig. 2 for an illustration. Observe that: 

• degi„ (ui) = 3 and deg^^ (m,) = 1 for all / = 1,2, . . . , |y |. 



degj^ («■) = 1 and deg^^ («■) = for all / = 1,2, ... , \V\. Thus, by Proposition 7.1(a), every node U{ 
must be shocked to make the network fail. 
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degi„(e/j) = Oand 
degoutl^ij) = 2 for all i and j. 
Since deg^^{eij) = 0, if a node 
Cij is shocked, no part of the 
shock is propagated to any other 
node in the network. 

Since the longest path in ^ has 
2 edges, by Proposition 7.1(b) 
no new node fails at any t >3. 



^1,2 




\( \( \( \f \( \f 

6 6 6 o o o 




\f \( \f \f \f \f 
o 6 6 6 6 6 



• failed 
Onot shocked 
O arbitrary 

Figure 3: Case (III): if node U2 is shocked then the nodes 
«i, 2,^2.3 and 62,5 must fail at ? = 2. 



For notational convenience, let n = \V\, S' = E/n, and ei,j^,ei,j^ and e,-^, be the three edges {v;, v^j }, {v,-, vy^} 
and {v;, Vy-j} in G that are incident on the node v,. We will select the remaining network parameters, namely 
7, ^ and S, based on the following desirable properties. 

(I) If a node w- is shocked at / = 1, it fails: 

O (degi„(M;.) - deg„„,(M;.) + S)>y {d^gM) + S) = ^ {\ + > y + = ^> y (2) 

(II) If a node Cij is shocked, it does not fail: 

degi„ {eij) - deg„„j {eij) + S<Q = S<2 (3) 



(III) If a node w,- is shocked at / = 1, then fails at ? = 1, and the nodes eij^,eij^ and eij^ fail at time t = 2 
if they were not shocked (see Fig. 3 for an illustration): 

> r (degi„(e,-ji ) + (T) 



degin(",) 
min{<I>(2 + <^)-7(3 + ^f),3} 



>y^ 



The above inequality is satisfied provided: 



a>(2 + <f)> 7(3+ 4(f) (4) 
l>7# = 7<i (5) 

(IV) Consider a sink node eij. Then, we require that if one or both of the super-source node w- and u'j are 
shocked at ? = 1 but the none of the nodes w,, uj and etj were shocked, then we require that one or both of 
the corresponding nodes m,- and uj fail at ? = 2, but the node ejj never fails. Pictorially, we want a situation 
as depicted in Fig. 4. This is satisfied provided the following inequalities hold: 

(rV-1) Ui fails at ? = 2 if M- was shocked (the case of Uj and u'j is similar): 

min { <D (degi„(M;) - deg„„t(M;) + S)^y {d&g^M) + <^ ) > ^^zM) } 



degin("-) 
min{(<I>-7)(l + <f), 1} 



>7(degi„(M/) + <^) 



>y{3 + S) 
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The above inequaUty is satisfied provided: 



(<D-7)(l + <f) >7(3 + ^) 
l>7(3 + (f) 

(IV-2) eij never fails even if both and uj have failed: 
min{(a>-y)(l + ^),l} _^^^^^^^j^ 



The above inequaUty is satisfied provided: 



(<D-7)(l + ,f)<37 1 + - =^(l + <^)<7 4 + 



<I>(l + ^f) >7(4 + 2<^) 
1 



= y< 



3 + , 



= nun 



1 <37 1+ 



5<f 



y> 



6 + 3E 



(6) 
(7) 



{(<I>-y)(l + ^),l}<3y(^l + 



(8) 
(9) 



t = i 



t = 2 



T>2 





• failed 

# not shocked 
O arbitrary 

O never fails 

Figure 4: Case (IV): to make ^2,3 fail, at least one of U2 or M3 must be shocked. 



There are obviously many 
choices of parameters y, 

and S" that satisfy Equa- 
tions (2)-(9); here we ex- 
hibit just one. Let # = 

1 which satisfied Equa- 
tion (3). Choosing 7 = 
0.23 satisfies Equations (5), 
(7) and (9). Letting O = 
0.7 satisfies Equations (2), (4), (6) and (8). 

Suppose that y' C V is a solution of 3-MIN-NODE-COVER. Then, we shock all the super-nodes, and 
the nodes in V'. By (I) and (III) all the super-nodes and the nodes in (Uy.gyyy/{v;}) fails at f = 1, and by 
(III) the nodes in U{v, Vj}€£{^(,7'} fails t = 2. Thus, we obtain a solution of ^ by shocking |y'| -|-n nodes. 

i<j 

Conversely, consider a solution of the SXABr $ problem on Remember that all the super-nodes must 

be shocked, which ensures that we need to shock n + a nodes for some integer a>0, and that any node v,- 
that is not shocked will fail att = 2. By (II) it is of no use to shock the sink nodes. Thus, the shocked nodes 
consist of all super-nodes and a subset V' of cardinality a of the nodes ui,U2, . ■ . ,u„. By (IV) for every node 
eij at least one of the nodes m; or uj must be in J7. Thus, the set of nodes {v, \ui eU} form a node cover of 
G of size a. 

That the reduction is an L-reduction follows from the observation that any locally improvable solution 
of 3-MIN-NODE-COVER has between n/3 and n nodes. □ 



11 Restricted Homogeneous Networks, Stabj^^, Any T, Exact Solution 

The APX-hardness result of Theorem 10.1 has constant values for both and 7, and requires degom(v) = 2 
for some nodes v. We show that if degom(v) < 1 for every node v then under mild technical assumptions 
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SI*(G,r) can be computed in polynomial time for any T and, in addition, if degjj,(v) is bounded by a 
constant for every node v then the network is highly stable {i.e., SI* (G,r) is large). Recall that an in- 
arborescence is a directed rooted tree where all edges are oriented towards the root. 

Theorem 11.1. If the banking network G is a rooted in-arborescence then SI* (G, T) > j 

l+degr(f-l 

where deg™^" = maxyev {degi„(v)}. Moreover, under the assumption that every node of G can be individu- 
ally failed by shocking, SI* (G, T) can be computed exactly in O («^) time. 

Remark 11.2. Thus, for example, when deg™""" = 2>, y = Q.\ and^ = Q. 15, we get SI* (G, T) > 0.22 and the 
network cannot be put to death without shocking more than 22% of the nodes. The proof gives an example 
for which the lower bound is tight. 

In the rest of this section, we prove the above theorem. Let G = be the given in-arborescence 

rooted at node r. We will use the following notations and terminologies: 

• M — > V and M V denote a directed edge and a directed path of one of more edges, respectively, from 
node u to node v. 

• If (m,v) G F then v is the parent of u and m is a child of v. Similarly, if m ^ v exists in G then v an 
ancestor of u and u a descendent of v. 

• Let V(m) = {v| M V exists in G} denote the set of all proper ancestors of u, and A(m) = {v| v 

u exists in G} U {u} denote the set of all descendents of u (including the node u itself). Note that for 
the network G to fail, at least one node in V(m) U {u} must be shocked for every node u. 

Suppose that we shock a node m of G (and shock no other nodes in A(m)). If u fails, then the shock spUts 
and propagates to a subset of nodes in A(m) until each spUt part of the shock terminates because of one of 
the following reasons: 

• the component of the shock reaches a "leaf" node v with degjn(v) = 0, or 

• the component of the shock reaches a node v with a sufficiently high Cy such that v does not fail. 
Based on the above observations, we define the following quantities. 

Definition 11.3 (see Fig. 5 for illustrations). The influence zone of a shock on u, denoted by \z{u), is the set 
of all failed nodes v G A(m) within time T when u is shocked (and, no other node in A(m) is shocked). Note 
that u G \z{u). 

Note that, for any node u, \z{u) can be computed in 0{n) time. 
Lemma 11.4. For any node u, | iz(M) | < 1 +deg^j^{u) ~ l)- 

Proof. For notational simphcity, let = £/«. If the node u does not fail when shocked, or u fails but it 
has no child, then | iz(M) | < 1 and our claim holds since <S» > y. Otherwise, u fails and each of its degjjj(M) 
children at level 2 receives a part of the shock given by 

. f ^ (degin(M) - 1 + ^) - y(degi„(«) + \ 

D = mm< , 1 S 

I degiJw) J 

<^(^ + :r^)-y(^ + :r^T^) <^(i+'^)-y(i+<^) 

V degi„(M)y V ^sMJ 
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shocked ® 
failed (due to shock) # 
not shocked and not failed O 




Figure 5: Influence zone of a shock on u. 




X A A A 



o o O O i 

Figure 6: A tight example for the bound 
in Lemma 11.4 ((f = 0). 



Consider a child v of u. Each node v' € A(v) that fails due to the shock subtracts an amount of 7(degjn(v') + <f ) > 
7(1 + from D provided this subtraction does not result in a negative value. Thus, the total number of 
failed nodes is strictly less than 1 + degi„(M) '^^^"^^j"^^-^^"'"'^^ = 1 + degjn(M) (7 ~ l) • ^ 

Remark 11.5. The hound in Lemma 11.4 is tight as shown in Fig. 6. 

Lemma 1 1.4 immediately implies that 

n 



max 

S\*{G,T)> -> 



{iz(u)} „/(i+degr(f-l)) 



i+degp;-(f 



1 



We now provide a polynomial time algorithm to compute S\*{G,T) exactly assuming each node can be 
shocked to fail individually. For a node u, define the following: 

• For every node u' G V(m), SIs^ns(G, T, u, u') is the number of nodes in an optimal solution of StaBj- ^ 
for the subgraph induced by the nodes in A(m) (or 00, if there is no feasible solution of StaBt-^iJ) for 
this subgraph under the stated conditions) assuming the following: 

- u' was shocked, 

- u was not shocked, and 

- no node in the path u' ^u excluding u' was shocked. 

• S'sas(^'^'") number of nodes in an optimal solution of StaBj-^, for the subgraph induced 
by the nodes in A(m) (or 00, if there is no feasible solution of StaBj- $ under the stated conditions)-^ 
assuming that the node u was shocked (and therefore failed). 

We consider the usual partition of the nodes of G into levels: level (r) = 1 and level (m) = level (v) + 1 if m is 
a child of v. We will compute Sig^g (G,r,M) and Sls^i^s(G,r,M,v) for the nodes u level by level, starting 



Intuitively, a value of 00 signifies that the corresponding quantity is undefined. 
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with the highest level and proceeding to successive lower levels. By Observation 7.1(a), the root r must 
be shocked to fail for the entire network to fail, and thus Sls^s(G,r,r) will provide us with our required 
optimal solution. 

Every node u at the highest level has degi„(M) = 0. In general, Sls^s(G, T, u) and Sls^i^s(G, T, m, m') can 
be computed for any node u with degi„(M) = as follows: 

Computing Slg^s (G,r,M) when degijj(M) =0: S\\p^^{G^T ,u) = 1 by our assumption that every node can 
be shocked to fail. 

Computing Sls^iyfs(G, T,u,u') when degjji(M) = 0: 

• If M G \z{u') then shocking node v makes node u fail. Since node u fails without being shocked, 
we have Slg^j^g (G,r,M,M') = 0. 

• Otherwise, node u does not fail. Thus, there is no feasible solution and S>\%/^^^{G,T,u,u') = °o. 

Note that we only count the number of nodes in A{u) in the calculations of SIs^ns(G, T, u, u') and SI|^s(G, T, u). 

Now, consider a node u at some level ^ with degi„(M) > 0. Let vi, V2, . . ■jV^^^.^i^u) be the children of u at 
level Note that V(vi) = V(v2) = • • • = V(vdeg„(«))- 

Computing Slg^s (G,r,M) when degj|,(M) > 0: By our assumption, u fails when shocked. Note that no 
node in A(m) \ {u} can receive any component of a shock given to a node in V \ A(m) since u failed. 
For each child v, of u we have two choices: v, is shocked and (and, therefore, fails), or v, is not shocked. 
Thus, in this case we have Sls^s(G,r,M) = 1 +Eff^"^"'rnin| Slg^sC^'^'^i)) SIsans(^'^'^''") }• 

Computing SlsAiy[s(G, T,u,u') when degi„(M) > 0: Since u' is shocked and u is not shocked, the following 
cases arise: 

• If M ^ \z{u') then then u does not fail. Thus, there is no feasible solution for the subgraph induced 
by the nodes in A{u) under this condition, and S\*^j^j^^{G,T,u,u') = oo. 

• Otherwise, u € \z{u'), and therefore u fails when u' is shocked. For each child v, of u, there 
are two options: v, is shocked and fails, or v, is not shocked. Thus, in this case we have 

siLNs(G,r,«,«0 = L?;!"^"^min{si*SAs(G,r,vO,srsANs(G,r,v,-,«^ 

Let ^max be the maximum level number of any node in G. Based on the above observations, we can design 
the dynamic programming algorithm as shown in Fig. 7 to compute an optimal solution of STABr o on G. 
It is easy to check that the running time of our algorithm is 0{n^). 

12 Heterogeneous Networks, StaBt-^^, Any T, Logarithmic Inapproxima- 
bility 

Theorem 12.1. Assuming NP ^ DTIME («'°^'°s"),/or any constant < e < 1 and any T, it is impossible to 
approximate SI* (G, T) within a factor o/ (1 — e) Inn in polynomial time even if G is a DAG. 
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(* preprocessing *) 

Vm G y : compute \z{u) 

(* dynamic programming *) 

for £ = Cax,Cax- 1, • • • , 1 do 

for each node u at level £ do 
if degi„(M) = then 

SIsas(<^'^'") = 1 

Vm' G V(m) : if M G iz(M') then SIsans i^, T, u, u') = else SI^ans-^^ T,u,u') = °o 
else (* degi„(M) > *) 

srsAs(G,r,i.) = i+Ltf"("Uin{srsAs(G,r,v,),siLNs(G,r,v,-,«^ 

W G V(m): if m ^ iz(M') then S\l^^siG,T,u,u') = °o 
else 

siLNs(G,r,«,«0 = LST"^"^min{siLs(G,r,vO,siLNs(G,r,v,-,M')} 

endif 

endif 
endfor 
endfor 

return S\*^j^^{G,T,r) as the solution 

Figure 7: A polynomial time algorithm to compute Sr(G, T) when G is a rooted in-arborescence and each 
node of G fails individually when shocked. 

={m1,M2,«3,«4} 

= {51,52,53,54} 

51 = {ai,ii2,M3} 

52 = {U3,U4} 

53 = {us} 

54 = {mi,M2} 
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Proof. The (unweighted) Set-Cover problem is defined as follows. We have an universe of « elements, 
a collection of m sets y over The goal is to pick a sub-collection y C y containing a minimum 
number of sets such that these sets "cover" i.e., U5g^'5 = It is known that there exists instances of 
Set-Cover that cannot be approximated within a factor of (1 — 5) Inn, for any constant < 5 < 1, unless 
NP C DTIME [25]. Without any loss of generality, one may assume that every element m G 

belongs to at least two sets in y since otherwise the only set containing u must be selected in any solution. 

Given such an instance of Set-Cover, we now construct an instance of the banking network 

G = {V,F) as follows: 

• We have a special node 93. 

• For every set 5 G y, we have a node 5, and a directed edge (5, S). 
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Figure 8: An instance (^,,5^) of 
Set-Cover and its correspond- 
ing banking network G= {V,F). 



• For every element m G we have a node u, and directed edges (m,5) for every set 5 that contains u. 

Thus, \V\=n + m + l, and |F | <nm + m. See Fig. 8 for an illustration. We set the shares of internal assets 
for each bank as follows: 



• For each set 5 G if 5 contains k> I elements then, for each element w G 5, we set the weight of 
the edge e = {u,S) as w{e) = |. 

• For each set S G y, we set the weight of the edge (5, 23) as 1. 
Thus, / = 4m. Also, observe that: 

• For any 5 G y, bs = 3, and 1$ = 1. 

• For any u £ 'W, bu = 0. Also, since u belongs to at least two sets in y and any set has at most n — 1 
elements, ^ < la < ^. 

• bf8=m and l^g = 0. 



• Since degjn(M) = for any element m G if a node u is shocked, no part of the shock is propagated 
to any other node in the network. 

• Since the longest path in G has 2 edges, by Proposition 7. 1(b) no new node in G fails for T > 3. 

Let the share of external assets for a node (bank) y be denoted by Ey (thus, Y,yev^y = We will select the 
remaining network parameters, namely 7, O and the Ey values, based on the following properties. 

(I) If the node 23 is shocked at ? = 1, it fails: 

^{bis-l^+E^)>Yibi8 + E^) = a>(m + £s5) >y(m + £s) = a> > 7 (10) 

(II) For any 5 G =5^, if node S is shocked at f = 1, then S fails at f = 1, and, for every w G 5, node u fails at 
time t = 2: 

min {^{bs- Is + Es)-r{bs + Es),bs} 

->Y{bu + Eu) 



degin(5) 

_ min{<I>(2 + £s)-7(3 + £'s),3} 



\S\ 

The above inequality is satisfied if: 



>rEu 



^i2 + Es)>ri3 + Es+\S\Eu) (11) 
^{2 + Es)-rO + Es)<3 (12) 

(in) For any m G consider the node u, and let 5i,52, . . . ,5^ G =5^ be the p sets that contain u. Then, 
we require that if the node S is shocked at ? = 1 then S fails at ? = 1, every node among the set of nodes 
{Si,S2,---,Sp} that was not shocked at f = 1 fails at f = 2, but the node u does not fail if the none of the 
nodes u,Si,S2,---,Sp were shocked. This is satisfied provided the following inequalities hold: 
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(III-l) Any node among the set of nodes {5i,52, ...,Sp} that was not shocked att = I fails at ? = 2. This 
is satisfies provided for any set 5 G =y the following holds: 



->r{bs + Es) 



degi„(«) 



The above inequaUty is satisfied provided: 



= min<J (<I,-y)( l + ^j,l }>y{3+Es) 



(<I>-7)(l + ^) >7(3 + £s) ^ 0(1 + ^) >7(4 + £5 + ^) (13) 

l>y(3+£s) = r<TTW- (1"^) 
J + Es 

(111-2) u does not fail if the none of the nodes u,Si,S2,---,Sp were shocked: 
min|(a>-y)fl + ^Vll-7(3+£s)<^^" 



m I \ n 



^ minU<J>-7)(l + 5),l}<7(3 + £. + f^ 



The above inequaUty is satisfied provided: 



{^-y){^ + ^)<Y(^+Es + ^] ^^(x + ^)<y(A + Es + ^ + ^) (15) 
\ m J \ n J \ m J \ m n J 

^'^"^^^ + 5)-^ ^ ^-*"TT^ ^^^^ 

There are many choices of parameters y, 4> and EyS satisfying Equations (10)-(16); we exhibit just one: 
V5g^:£s = £s8 = VmG'^:£„ = --^ y = 0.1 a> = 0.4+ ^ 
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lOOn ' n 

Suppose that C =y is a solution of Set-Cover. Then, we shock the node 23 and the nodes S for each 
S ey". By (I) and (II) the node S and the nodes 5 for each S e^" fails at ? = 1, and by (II) the nodes u 
for every m G ^ fails t = 2. Thus, we obtain a solution of G by shocking \y\ + 1 nodes. 

Conversely, consider a solution of the STAB7 $ problem on G. If a node u for some m € was shocked, 
we can instead shock the node S for any set 5 that contains a, which by (II) still fails all the nodes in the 
network and does not increase the number of shocked nodes. Thus, after such normalizations, we may 
assume that the shocked nodes consist of 23 and a subset C ^ of nodes. By (II) and (III) for every node 
M G ^ at least one set that contains u must be in S^'. Thus, the collection of sets in S^' form a cover of ^ 
of size \cS'\. □ 

13 Heterogeneous Networks, Stab2,o, Logarithmic Approximation 

For any positive real x > 0, let x = max{x, i/x} and x = min{x, ^/x}. Let W min = miUg. w{e)>0 {^{^)}' 
Wmax = max<; {w{e)}, oWn = miuv: a,>o {av}, and a^^ = max^ {0^}. 
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Theorem 13.1. StaB2,<J) admits a poly-time algorithm with approximation ratio 

n E Wfnax ^min Otmax 



O log 



Proof. We can reuse the proof of the corresponding approximation for homogeneous networks in Theo- 
rem 9.1 to obtain an approximation ratio of 2 + ln« + ln ( maxygy | J^^gy ^ I ), where ^ = min{ min{5„v}, q 

provided we recalculate maxygy |LM€y Then, 

nun {5u,u} = imn <^ O j £ w{e) w{e) +ayE\\ = Q.{yo\y {s,^,E,a^) ) 



mm mm |5„v} =mm mm < 
mgv vey ^ ' ^ uev vev ' 

5„„>0 3>ev>c, 



(a>-y) 



1 + v r 

\e={V,v)eF ) 



e=(v',v)ef| 

(^poly(n-\ 



^ - 7i ^> Wmax , VVmin , OW 



.)) 



min{c„}=mini 7 + I f =^^(poly(n \y,£;, OWn , Wmin ) ) 

^ = min{ minmin{5„,v},min{c„}} =n(poly (w'^O- y,^,y,£, Wmin ,QWn, Wniax ) ) 
wev vev mgv \ / 



max V 5v M < n max < 



(a>-y) 



1 + 



e=(v.v')GF 



CL,E 

Yw{e) _ 

\e=(v',v)ef j e=(v',v)eFj 



O.^^ >=0 poly n,£, 



^max ) l^min ) Olmax 



)) 



and thus, 



max 



1% 



I =0 (|poly (^n,a> \y l,(a>-y) \£,£; \winax,Wmin,OWax, Wmin \ OWn 



giving the desired approximation bound. 



14 Heterogeneous Networks, STABy^^*, r > 3, Poly-logarithmic Inapprox- 
imability 

Theorem 14.1. Assuming NP DTIME («P°'>'(^°s")),/or any constant < £ < 1 and any T > 3, it is impos- 
sible to approximate SI*(G, T) within a factor of 2^°^ ^" in polynomial time even ifG is a DAG. 

Proof. The MiNREP problem (with minor modifications from the original setup) is defined as follows. We 
are given a bipartite graph G = (V'^^^', such that the degree of every node of G is at least 10, a 

partition of V^'^*' into equal-size subsets V/'^'', ^^2*^'', . . • , V^*^", and a partition of into ^ equal- 
size subsets V;'^*^' , ^2"^'', V;^"^'. 
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These partitions define a natural "bipartite super-graph" Gguper = (Kuper,^super) in the following manner. 

Gsuper has a "super-node" for every V^^^^ (for / = 1,2, .... a) and for every y"^*'' (for j = 1,2, . . . , jS). There 
exists an "super-edge" hij between the super-node for V/*^*' and the super-node for V"^*^' if and only if there 
exists u € V/'^^' and v € V"^*^' such that {u,v} is an edge of G. A pair of nodes u and v of G "witnesses" the 
super-edge hij of H provided u is in V-^^^, v is in V"^''' and the edge {u,v} exists in G, and a set of nodes 
y' C y of G witnesses a super-edge if and only if there exists at least one pair of nodes in S that witnesses 
the super-edge. 

The goal of Minrep is to find Vi C V^^^ and V2 C V"^^^ such that Vi U V2 witnesses every super-edge of H 
and the size of the solution, namely |yi | + |y2|, is minimum. For notational simplicity, letn = \V^^^\ + \V^^^^\. 
The following result is a consequence of Raz's parallel repetition theorem [37, 44]. 

Theorem 14,2. [37] Let L be any language in NP and < 5 < \ be any constant. Then, there exists a 
reduction running in nP°^5'(iog«) ^j^j^ fj^f^ given an input instance x of L, produces an instance o/MlNREP 
such that: 

• ifx G L then MiNREP has a solution of size CC + P; 

• ifx^L then MiNREP has a solution of size at least {a + P)- 2^°^' 

Thus, the above theorem provides a 2'°^' ^"-inapproximability for MiNREP under the complexity- 
theoretic assumption of NP ^ DTIME („poiyiog(n) ^ 

Let Fij = |{m,v} I u £ Vl^^\ V G y"^*", {u,v} £ f|. We now show our construction of an instance of 

StaBt-^o from an instance of Minrep. Our directed graph = (T^,^) for Stabt-o is constructed as 
follows (see Fig. 9 for an illustration): 

Nodes: 

• For every node u G V^^^ of G we have a corresponding node it in the set of nod es V^ ^^^ in and for 

every nodevey/s^ofG we have a corresponding node v in the set of nodes Vj in G . The total 
number of such nodes is n. 

• For every edge {u, v} of G with u G V^^^^ and v G y"^*^', we have a corresponding node f-j^^-^ in the set 
of nodes Fij in There are |F| such nodes. 

• For every super-edge hi j of Gsuper, we have a node hij in There are |Fsuper| such nodes. 

• We have one "top super-node" Vtop, one "side super-node" Vside, and2 additional nodes Cdi,K2, . . . ,^\f\, 

\f\ \f\ 
mi, m2, . . . , m\F\ - Let td = U^.Jjtd; and m = ^jlit^j. 

Thus,n + 3|F| + 2< |V^| =n+|F| + |Fsuper|+2 + 2|F| <n + 4|F| + 2. 
Edges: 

• For every node u of G, we have an edge (w, Vtop) in There are n such edges. 

• For every edge {u, v} of G, we have two edges {f-^^-^ , it) and {f-j^^-^ , 1^) in There are 2 |F | such 
edges. 
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MiNREP instance 




Figure 9: Reduction of an instance of Minrep to Stabj- $ for heterogeneous networks. 



• For every super-edge hij of Gsuper and for every edge /„,v in Fij, we have an edge (jHj,fy^-^^ in ^• 
There are \F\ such edges. 

• Let pi,p2, ■ ■ ■ ,P\F\ be any arbitrary ordering of the edges in F. Then, for every j = 1,2, ... , we 
have the edges (vside, Wy), (tdy,cqy) and {mj,pj). The total number of such edges is 3|F|. 

Thus, l"^! =n + 6|F|. 

Distribution of internal assets: We set the weight of every edge to 1, Thus, / = n + £„£yMtuynghtdeg(M) + 
4|F| =n + 6\F\. 

Let deg(M) > 10 be the degree of node u G V^'^'' U Observe that: 

• ^vtop = and iv,^p = 0. Since deg^m (vtop) = 0, by Proposition 7.1(a) the node Vtop must be shocked to 
make the network fail. 

• ^Vside = 1^1' ^ide ~ ^- Since deggm (vside) = 0> by Proposition 7.1(a) the node Vgide must be shocked 
to make the network fail. 
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• For any M G V^^^ U V'^^^\ = deg{u) and = 1. 

• For any node /-^ bf^ ^ = 1 and _^ = 2. 

• For every node hij, b^ = and = \Fij\. Since degj^ = for ^riy node hij, if such a node 
is shocked, no part of the shock is propagated to any other node in the network. 

• For every j, bp:,. = !„. = b^. = i«. = 1. 

• Since the longest directed path in G has 4 edges, by Proposition 7.1(b) no new node in G fails for 
t>A. 

Let the share of external assets for a node (bank) y be denoted by Ey (thus, Y^yev^y = We will select 
the remaining network parameters, namely y, «I> and the set of Ey values, based on the following desirable 
properties and events. For the convenience of the readers, all the relevant constraints are also summarized 
in Table 3. Assume that no nodes in [yijE^j^ U [yij {^'J'}) ^^'"^ shocked at ? = 1. 

(I) Suppose that the node Vtop is shocked at ? = 1 . Then, the following happens. 



(I-a) Vtop fails at / = 1: 



^ (^op - Inop + Ev^o, ) > r ( + £n„p ) =^{n + E,^ ) > y („ + £ ) = O > y 



(17) 



(I-b) Each node it G V^®" U V^s'*' that was not shocked at ? = 1 fails at ? = 2: 

7(^nop+^v,„p),^v.op} 



degin(vtop) 



>r{b^+E^) 

min {a> (n + E^^^^ ) - y („ + „} 



^^^^^>7(deg(M)+%) 



These constraints are satisfied provided 
'f(« + ^n„p)-7(n + £nop 



>r(deg(M)+£-;^) = 



'J'(« + ^nop)-7(« + ^nop)<« = 




(18) 



(19) 



(I-c) If the nodes it, 'V' and fy^-^ were not shocked at ? = 1, then the part of the shock, say (7i, given 



26 




4> (deg(«) Y{deg{u)+E^ ) 4> (deg(v) - 1 +E^) - r(deg(v) ) 



deg(M) 



+ ■ 



deg(v) 



>r 



(21) 



* < 7 



deg(i() 



deg(t<)+£'^ \ ^ 

deg(M) - 1 + £-3. y deg(M) - 1 + % 



(22) 



*(deg(M) - 1 ) - y(de g(«)+£-^) _^ *(deg(v)_- 1 ) - r(deg(v) 



deg(M) 



deg(v) 



(23) 




y 2 



(1 + ^) 



(26) 



4> > 7 



3|F| + |F|£„. + |F|£„^^+£v,,e 



(29) 



<& < 7+ 



(27) 



*<r iH 



(28) 



*< 7 1 + 



1 -I- ^''slile 



+ 



1 4- ^"side 



(30) 



/ 3+^ 
*<7 ' ' . I + 



1 -i- ^"side 



1 -L- "side 



(32) 



* > 7 



f. I 1 I 'top I E-j I 1 I "^0? I ^-j^ I I ^"side I F IP 

°+ diiH + ndeg(«) + diiM + diiH + ^TdiiH + dE^ +'^fit.t + 



-Bv. 



1 4- ^side _i_ i _i_ '^'op I i I ''op 

IfT deg(i;j ndeg(«) ^ dSi(7y ^ « deg(v) 



(31) 



deg(M) 
p 

1 _|_ '''°p 



(33) 



*>7 



'6+ %f +F„, + ^ + g+i + +F^^^^ 



"^W aii(«y + «deg(M)"^d5i(vy 



(34) 



4) < y 



'3+^+Ftc 



'side 



+ 



- Ea + Frc 



1 J lii* _ F„ _i_ F 



(35) 



*<7 



6 + 



1 I risp u ^11 I i I 1 i : 

deg(«) ndeg(«) deg(«) deg(y) ndeg(v) deg(v) J~l.^ 



1 I ^nop I 



11 1 J ^"MP I 1 I ^''°P I ^»side F _i_F 

^ degllij n deg(«) n deg(v) IfT -^"y+^mj 



1 _L 1 I ''top I 1 I ''top I ^''side _ F 4- F 

^ deg(«) n deg(«) deg(v) n deg(i') "[fT 



(36) 



/; I 1 I ^''lop I I 1 I ^"'op I I 17 , I ""side I F i F I '"'.J 



4>< 



1 I 1 I ^''lop I 1 



degM n deg(«) deK^J n deg(v) ^ |F| -^By 



F F 



(37) 



(J) < y 



'2+^+£te 



(38) 



*<7 ^ 

V 1 + ^ 



(39) 



3> < 



6+; 



15 + « deg(«) + degju) + deg(t.) + [ff + ^"j + ^/t?,"!^ + + "ffJJ 



1\ 



2 + 



deg(«) n deg(«) deg(v) deg^^) IFf 



'""top 



-FtJJi +£(5,- 



(40) 



2+ 



deg(5J ndeg(«) digW"^ deg(;j "fFT ^"j+^mj 



O I 1 I "top 1 I ^-j^ I ""side F 4- F 

■^^^degR^ndeg(H) deg(;j ^ digW ^ iff ^"j^^m; 



(42) 



Table 3: List of all inequalities to be satisfied in the proof of Theorem 14.1. 
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(71 = 



to Vtop that is received by node -^^ at ? = 3 is: 
I degin(vtop) 



+ 



degin (It) 

[ degi„(vtop) J 

^ degi„(V) 

nun <^ 5^ ^— ? ^ - y (deg(M) , deg(M) S 

deg(M) 

min <^ !^ 5— ^ ^ - 7 (deg(v) + , deg(v) > 

deg(v) 

On the other hand, if the node fy^-^ and exactly one of the nodes it and 1^, say it, were no? 
shocked at f = 1, then the part of the shock, say given to Vtop that is received by node fy^-^ 
at ? = 3 is: 

• / min {«^ (n + ) - y(n + E,^^ ),n} f , . , ^\ 

nun <^ ^2 5 7 (deg(M) +E^) , deg{u) S 



deg(M) 

(11) Suppose that some node it is shocked at ? = 1 . Then, the following happens, 
(n-a) Nodel? fails at ? = 1 : 



^ibi!-iit+Et)>ribi!+E^) = 



<5 > 7 ( 1 ^ 



deg(n)- 1 +E-^ 



(20) 



(Il-b) Node f-^-^& Fij fails at / = 2 and node hij fails at / = 3 if both it and "7" were shocked at 
t = h 

min {^{b^-lt+ Et ) - 7 (^i? + ^i? ) , ^i? } 
degi„(l?) 

, min{a>(fc^-t^ + £-i^)-7(j7^+£^),fc^} ^ \ 
+ diU^^ > ^ r^^'^ +^^^^^J 

^ min{<I>(deg(M)-l+£^) - 7(deg(M) ), deg(M) } 

deg(M) 

min{ cD(deg(r)-l+£V) - y(deg(r) +£v ), deg(y) } ^ ^ , „ \ 
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min { * (deg(M) -1+E-^)- y (deg(«) + £7? ) , deg(M) } min { * (deg(v) -l+E^)- 7 (deg(v) + E-;^ ), deg(v) } 



deg(M) 



+ - 



deg(v) 



These constraints are satisfied provided the inequalities (17)-(20) are satisfied, and the following 
holds: 



<I>(deg(M)-l+£^)-7(deg(M)+£^) , <I>(deg(v)-l+£^)-7(deg(v)+£^) 



deg(M) 



+ ■ 



deg(v) 



>r 



(21) 



O (deg(M) - 1 + - 7 (deg(M) +E^)< deg{u) = 



a><y( deg(M) 



deg(M)-l+£^y deg(M)-l+£'^ 



(22) 



O (deg(M) -\+E^)- 7(d eg(M)+£^) ^ a>(deg(v)- l+E^)- 7(deg(v) + E^) 



deg(M) 



deg(v) 



-r(i+£/^,^)>r£^ 



(23) 



(24) 



(III) When the node Vside is shocked at / = 1, the following happens. 
(Ill-a) Vside fails at ? = 1: 

*J>(^.,.-lvside+'Ev.„J>7(^V,,e+^V.Me) = ( 1^ I + ^V,, J > 7( 1^ I + ^V.^e ) = 

which is same as (17). 
(Ill-b) If a node Cd^ G td is shocked at ? = 1, it does not fail: 



<J>(^«,-i«,+£«,)<7(^«,+£«,) = 



<D<7( 1 + -^ 



(25) 



(III-c) Any node Cdy € W fails at / = 2 irrespective of whether Cdj was shocked or not: 

min{<I>(&Vside-lvside+^v,aJ - 7(^Vside+^Vsi<ie)'^Vside} 



degin( Vside) 

These constraints are satisfied provided: 



>7(Z7«.+£td.) 



degi„( Vside) 




(26) 
(27) 
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(Ill-d) If a node pq^ G cq is shocked at ? = 1, it does not fail (and thus, by (Ill-b), it does not fail at 
t = 2 also): 



0< 7 1 + 



1 



(28) 



(Ill-e) Any node mj G m fails at ? = 3 irrespective of whether mj was shocked or not: 



nun • 



degin(W;) 



>r(V-+^«;) = 



These constraints are satisfied provided all the previous constraints hold and the following holds: 

'^i\F\+E,,J-r{\F\+E,^^ 



''Inside ' 



7(1 +£«.)> 7 (l+£:„,) = 



^(l^l+^^v,de)- 7(1^1 + 



-y(i 




(Ill-f) Consider a directed path^v^-^ — {Sj^ — (m]^ — (pj^from pj = f-^ -^ to Vside- The maximum 
value of its proportion of shock receive by pj from this path, say 02, is obtained by shocking all 
the nodes Vgide, tdy, mj and is given by (assuming all previous inequahties hold): 



02 



degui(vside) 



degta(Wj) 



= min < min < <I> 1 + 



■^«.) - 7(2+ ^+^«.) , 1} - (y(i+£«,)-^£«,), 1} 



Similarly, the minimum value of its proportion of shock receive by pj from this path, say 02, 
is obtained by shocking only the node Vgide and is given by (assuming all previous inequalities 
hold): 



^ (^Vside ^ide + ^Vside ) 7 (^Vjide + ^1 



mm < 



cr; = 



Vside ) 



degiii( Vside) 



-Y{b^j+E^j) 



degi„(W;) 



Y{b^j+E^j),b^j 



degin(pq;) 



min < <I> 1 + 



7(2 + ^+£«.) -7(l+£«,),l} 



We want node fy-^ to fail att = 4 assuming it did not fail already. Since fy-^ did not fail 
at ? = 2, at most one of the nodes it and ~^ was shocked. There are two cases to consider: 
when neither it nor it was shocked, or when exactly one of these nodes, say 1^, was shocked 
(assuming all previous inequalities hold): 
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+ 

min 

+ 



deg(M) 



> 



deg(v) 



min 

min < 
+ 




(' + ^)-r 
^i + ¥)-r( 


/ 9 1 -^Vsidi 

y n 


^+^«.)-r(i+£«,),i} 

) -7(deg(M)+£^),deg(M)| 


min] 


*( 






) 

) -7(deg(v)+£^),deg(v)| 


deg(v) 



, min{a>(Z7^-l^ + £v) - Y{b^+E^),b^} 
+ H ^ 7=F^ > 



+ 
+ 



min|<I>(^l + ^j -y(^2 + ^+E^^ 

• f min {a> (n + £v,„^ ) - y(n + E, ),n} / n . . n 

min <^ 5 5 7 (deg(M) + £7?) , deg(M) 

I 

deg(M) 

min {^{b^-i^ + E^)-Y{b^+E^),b^} 



+ 



min|<I>(^l + ^^ -y(^2 + ^+E^^ 

minjo^l + ^J -7(1 + ^) -y(deg(«) + £:-^),deg(M) 



deg(M) 

min{a>(deg(V) - 1 + - 7(deg(V) + ), deg(V)} 
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These constraints are satisfied provided all the previous constraints hold and the following holds: 



a> 1 



+ 



+ 



)-7(2 + ^+£«,)-y(i+£„,) 



^{l + ^]-Y(l + ^]-Y{deg{u)+E^) 



deg(M 

E, 



7 1 + - 



^top 



7(deg(v)+£^) 



deg(v) 



> 7 



<I> > 7 



6 + 



+ ■ 



■ + ■ 



■ + ■ 



■ + ■ 



"Vtop 



■ + 



deg(M) ' ndeg(M) ' deg(M) ' deg(v) ' ndeg(v) ' deg(v) ^'^^^■^ ^ |F| 



2 _|_ ^VsMe 



+ 



+ 



+ ■ 



+ ■ 



F\ deg(M) ndeg(M) deg(v) ndeg(v) 



(31) 
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+ 
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F| deg(M) ndeg(M) deg(v) 



(34) 



(IV) By (Il-b) node ht j fails at ? = 3 provided both the nodes 17" and 1?" were shocked at ? = 1. 
Our goal is to make sure that node hij does not fail in any other condition (assuming the node 
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itself was not shocked). Assuming the nodes and f-^ were not shocked, the maximum 

amount of shock that ^ ^ Fij can receive is when all the nodes before /-^ in the path 
— — (S})-^ — (^j^ — were shocked and no more than one of the nodes it or~^ was 
shocked. Based on this, the following constraints must hold for hij not to fail. 



deginC/s-,!^) 



mm 



mm 



mm 
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deg(M) 
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+ min<^ <I> 1 + 
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7(3 + ^+£«^.+£„, ),1J>,1 



< 



These constraints are satisfied provided all the previous constraints hold and the following holds: 




(35) 



33 



/6+ ^ ' 



^ < 7 



+ 



+ 



+ ■ 



1 



■ + ■ 
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(36) 
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deg(M) ndeg(M) deg(M) deg(v) «deg(v) deg(v 



Vlop E^ -^Vside IP IF I ^'J- \ 



1 + 



1 



■ + 



+ ■ 



1 



■ + ■ 
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+ 



■Eaj+Ep^j 



(37) 

On the other hand, if exactly one of the nodes it or ~i7", say it, was shocked at ? = 1, then the 
maximum amount of shock that fy^-^ G Fij can receive is is modified, and the new conditions 
for our desired goal become as follows. 



■„ . „f I minj^ib^- i^ + E^)- rib^ +E^ ), b^ } 
nun < CTj H 



degi„(^) 



+ <T2 - 7 {bfy,^ + Ef^^) , bfy -^ I r(b^.+ E^_ 
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deg(M) 
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degi„(V) 
E 
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These constraints are satisfied provided all the previous constraints hold and the following holds: 



^ ( 1 + ^'^''^ 



< 1 = 
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There are many choices of parameters 7, <I> and S^'s satisfying inequalities (17)-(26); we exhibit just one: 



7 = 4n" 



-1000 



-1000 



nop 



1 
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Remembering that 10 < deg(M) < n for any node u G V^^^ U V"^^^ and \Fij\ < \F\, it is relatively straightfor- 
ward to verify that all the inequaUties are satisfied for all sufficiently large n. Note that 

|f I 

Mgyleftuyright {u,v}€F /l,,j€Fsuper ' ;=1 

3 

= n^ + n^ \F\ +n + - \F\ + |Fsuper| 

and thus the ratio of total external assets to total internal assets E/Iis large. We can now finish our proof by 
selecting 5 such that log^~^n = log^~^ | — 1 and showing the following: 

(completeness) If Minrep has a solution of size a + j3 on G then SI* G , T j < a + j3 + 2. 

(soundness) If every solution of MiNREP on G is of size at least (a + j3)2^°§' then 
« + j8 



Proof of Completeness (Minrep has a solution of size a + j8) 

Let Vi C yieft and V2 C V"^^^ be a solution of MiNREP such that \Vi | + IV2I = a + jS. We shock the nodes 
vtop and Vside, and every node it for every u G V^^^UV"^^^. By (I-a) vtop fails at ? = 1, and by (I-b) and 
(n-a) every node in Uf^^V}''^^ [j uj^j Vj'^*" fails on or before f = 2. By (Ill-a), (Ill-b) and (IH-c) every node 

in {Vshock} U td U w fails on or before t = 3. Since Vi and V2 are a valid solution of MiNREP , for every 
super-edge hij there exists m G Vi and v G V2 such that u G V/*^^', v G V"^''' and {u,v} G F; since we shock 
the nodes it and 'V', by (Il-a) both it and 1^ fail at f = 1, by (Il-b) the node /-jf -^^ fails at f = 2, and by 

(II-c) the node h^j fails at ? = 3. Thus, the network fails at ? = 3 and SI* = a + P + 1 for t >4. 

Proof of Soundness (every solution of Minrep is of size at least (a + /3)2'°s' ^ ") 



We will prove the logically equivalent contrapositive of our claim, i.e., we will show that if SI* < 
a+§_2iog^'^n jjjgj^ MiNREP has a solution of size strictly less than (a + P)2^°^^~^". Consider a solution of 
StaBj- <j) on ^ that shocks at most z = 2'°^' nodes. Note that the nodes Vtop and Vside must be shocked 
at ? = 1 by Proposition 7.1(a). By (I-a) and (Ill-a), the nodes Vtop and Vside fails at ? = 1, by (I-b) and (III-c) 

— t — 

every node in V U u W fails at ? = 2, by (Ill-e) every node in pq fails at ? = 3, by (Ill-f) every node 
/t^ fails at f = 4 unless it was shocked at f = 1 and by (IV) a node hij fails only if htj, fovm,ovm £ Fij or 
both the nodes it and ~^ were shocked at ? = 1. We "normalize" this given solution in the following manner 
(each step of the normalization assumes that the previous steps have been already carried out): 

• If a node from pq U M was shocked at ? = 1, we do not shock it. By (III) this has no effect on the failure 
of the network. 

• If a node fy^-^ G ^ was shocked, we do not shock it but instead shock the nodes it and ~^ if they 
were not already shocked in the given solution. This at most doubles the number of nodes shocked 
and, by (Il-b), the node /„,v fails at ? = 2 and the node hjj fails at ? = 3 if it was not shocked at ? = 1 . 
Thus, after this sequence of normalization steps, we may assume that no fy^-^ node was shocked. 
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• If a node hij was shocked at ? = 1, we do not shock it but instead shock the nodes it and (for 
some u and v such that {u,v} € Fij) if they were not already shocked in the given solution. This at 
most doubles the number of nodes shocked and, by (Il-b), the node /„ y fails att = 2 and the node hij 
fails att = 3. Thus, after this sequence of normalization steps, we may assume that no htj node was 
shocked. 

These normalizations result in a solution of STABj- tj, of size at most 2z in which the nodes Vtop, Vside» a 
subset vj" C yi'^'t and a subset \^ C y"ght ^^^^^ q^j. solution of MiNREP isVy = {v\l)' ev[} <^ y'^'ft 
and V2 = {v|l^ G V2} C V^^^' of size 2z — 2< 2z. Since failure of every hij is attributed to shocking two 
nodes it and 1^ such that /s- G Fij, every super-edge hij of G is witnessed by the two nodes u and v. □ 

15 Homogeneous Networks, Dual-Stab?-^^ any T, hardness and exact 
algorithm 

Theorem 15.1. 

(a) Assuming P NP, DSI* (G, T, K") cannot be approximated within a factor 0/ (l — e~^ + 5) \ /or any 
5 > 0, even ifO is a DAG (e is the base of natural logarithm). 

(b) IfG is a rooted in-arborescence then DSI* (G, T,k)<- (l+ deg™'"' (f ~ )' ^^^^^ ^^SS"" = maXv^y {degjj,(v)} 
is the maximum in-degree over all nodes ofG. Moreover, under the assumption that any individual node of 

the network can be failed by shocking, DSr(G, T, k) can be computed exactly in 0{n^) time. 

Proof. 

(a) The max JC-cover problem is defined as follows. An instance of the problem is an universe of n 
elements, a collection of m sets over and a positive integer k. The goal is to pick a sub-collection 
S^' C. y of K sets such that the number of elements covered, namely | Us^y S\, is maximized. Let OPT 
denote the maximum number of elements covered by an optimal solution of the max Jc-cover problem. It 
was shown in [25] that, assuming P NP, the max JC-cover problem cannot be approximated within a factor 

of -j-^ — j — — for any constant 5 > 0. More precisely, [25] provides a polynomial-time reduction for a 

restricted but still NP-hard version of the Boolean satisfiability problem (3-CNF5) instances of max JC-cover 
with K= I I for some constant < a < 1 , and shows that 

(1) if the CNF formula is satisfiable, then OPT = | ^ | ; 

(2) if the CNF formula is not satisfiable, then OPT < ( I - - + g{K)] V^\, where g( Jc) ^ as Jc ^ 00. 



e 

Our reduction from max K"-cover to DuAL-STABy ^ is as follows''. In our graph G = (V,^'), we have an 
element node u for every element m G a set node 5 for every set S ^ 5^, and directed edges for 
every element m G and set 5 G =5^ such that m G 5. Thus, n = |y| = |^| + \y \ and |F| = Y^se^ l^l- We 
now set the remaining parameters as follows: E = n, Y = n~^ and 4> = 1. Now, we observe the following: 

• If an element node U is shocked, it does not fail since ^> (degj„ (w) — deg^m (m) + f ) < whereas 
r(degi„(M) + f)=n-2>0. 



^However, this exact construction will not work in the proof of Theorem 8.1 since the entire network needs to fail in that proof. 



37 



If a set node S is shocked, it fails since 4>(degjj, (5) — deg^^ (5) + ^) > 2 whereas 
r(degi„(5) + f)<^<l. 

If a set node 5 is shocked, then every element node m for m G 5 fails at ? = 2. To observe this, note that 

min (deg,„ {§) - deg,„t (5) + f ) - y (degj^ ju) + f ) , degj^ (5) } 

degin (S) 

n+l 



• Since the longest directed path in G has one edge, no new nodes fails during t>l. 

Based on the above observations, one can identify the sets selected in max k-covex with the set nodes selected 
for shocking in DUAL-SxABr^x: on G to conclude that DSI* (G,r, k) = OPT+ JC. Thus, using (1) and (2), 
inapproximability gap is 

I ^9/ I _L I ^9/ I " 1 

as I ^ I ^ oo for any 5 > 











1^1 


+ 


^1 


a 




1 







(b) Using Lemma 1 1 .4, we have 

K- ( max|iz(M) I ) , , 

Dsr (G,r, .) < iZ < ^ f 1 +degr f- - 1 

To provide a polynomial time algorithm for DSI* (G,r, K), we suitably modify the algorithm described in 
the proof of Theorem 11.1. We redefine SIs^^sC^'^'"'^) ^d Sls^s(G,r,M) in the following manner: 

• For every node m' G V(m) and every integer < A: < K", DSIs^nsI^j^)")"''^) the number of nodes 
in an optimal solution of DUAL-SXABr ,i> k- (or oo if there is no feasible solution of Dual-StaBj- $ k) 
for the subgraph induced by the nodes in A(m) assuming the following: 

- \i was shocked, 

- u was not shocked, 

- no node in the path u' except u' was shocked, and 

- total number of shocked nodes in A(m) is exactly k. 

• For every integer Q < k < K, DS\*^ ^^^{G, T ,u,k) is the number of nodes in an optimal solution of 
DUAL-SXABr o for the subgraph induced by the nodes in A(m) (or oo, if there is no feasible solution 
of SXABj- o under the stated conditions) assuming that the node u was shocked (and therefore failed), 
and the number of shocked nodes in A(m) is exactly k. 

Computing these quantities becomes slightly more computationally involved as shown below. 

Computing DSIs^s(G, T, u,k) when degi„(M) = 0: 

DS\lj^siG,T,u,l) = 1 and DS\lj^siG,T,u,k) = -oo for any A: 1. 
Computing DS\'^ j^^^{G, T, u, u' ,k) when degjjj(M) =0: 
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• If M G \z{u') then shocking node v makes node u fail. Thus, SIs^ns(^'^'"'"'' 1) — ^ 
S\^j^^^{G,T,u,u' ,k) = — oo for any A: 1. 

• Otherwise, node u does not fail. Thus, DS\'^j^^^{G,T,u,u') = —°o. 
Computing DSIs^s(G, T, u) when &eg^^{u) > 0: In this case we have 

DS\l^^{GJ,u,k) = 1 + 

, , , . I Lmin|DSIsAs(G,r,v,,/:0, DSIsANs(G,r,v^M,/:;)| I 

Computing DQ\*^^^^{G ,T ^u,u' ,k) when degjjj(M) > 0: Since u' is shocked and u is not shocked, the fol- 
lowing cases arise: 

• If M ^ \z{u') then then u does not fail. Then, 

^^\lm^{G,T,u,u ,k) = 



{degi„(M) 
y 



min ( £ min|DSIsAs(<^,7',v/,A;,),SlsANs(<^>^>v,,M',A;,)} 



Otherwise, u G \z{u'), and therefore u fails when u' is shocked. Then, 



{degin(«) 

It only remains to show how we compute 



min < £ min{DSI*SAs(G,r,v,-,A,),DSlLNs(<^,7^,v/,M',/:,)} 



mm 



{degi„(«) , . 1 

£ min DS\l^s{G,T,Vi,ki), DS\l^^s{G,T,Vi,u' A) \ {orFe{k-l,k} in poly- 
i=i ^ J 
nomial time. It is easy to cast this problem as an instance of the unbounded integral knapsack problem in 

the following manner: 

• We have degij,(M) objects ffi,^2, • ■ • > ^deg;^{u)' ^^^h of unlimited supply and weight 1. 

• The cost of selecting kf objects of the type is 

min{ DSILs(G,r,v,-,/:,), DS\*s^^s{G,T,Vi,u' A) } 

• The goal is to select a total of exactly F objects such that the total cost is minimum. 

The standard pseudo-polynomial time dynamic programming algorithm for Knapsack can be used to solve 
the above instance in 0(fcdegi„(M)) = O (n^) time. Thus, the total running time of our algorithm is O (n^). 

□ 
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16 Heterogeneous Networks, Dual-Stabi o k-» Stronger Inapproximability 



We show that DSI* (G, 2, fc) cannot be approximated within a large approximation factor provided a complexity- 
theoretic assumption is satisfied. To understand this assumption, we recall the following definitions from [6]. 

A random {m,n,d) hyper-graph H is a random hyper-graph of n nodes, m hyper-edges each having 
having exactly d nodes obtained by choosing each hyper-edge independently and uniformly at random. For 
our purpose, assume that J is a constant, and m>rf for some constant c> 3. Let Q: {0, 1 j*^ i— > {0, 1 } denote 
a d-wy predicate, and let be a distribution over li-local functions from {0, 1}" to {0, 1}'" by defining 
the random tZ-local function /// q : {0, 1}" i-)- {0, l}™ to be the function whose fi^ output is computed by 
applying the predicate QXoihe d inputs that are indexed by the hyper-edge of H. Finally, the K densest 
sub-hypergraph problem (DSk) is defined as follows: given an hyper-graph G = {V,F) with n = \V\ and 
m= \F\ such that every hyper-edge contains exactly d nodes and an integer K" > 0, select a subset V' C.V 
of exactly K nodes which maximizes | { {ui,U2, ■ ■ . €z F \ui,U2, ■ ■ ■ ,Uii G V'} |. 

The essence of the complexity-theoretic assumption is that if, for a suitable choice of Q, ^Q^m is a 
collection of one-way functions, then DS^: is hard to approximate. More precisely, the assumption is: 
(★) If =^(2,m is i/o(i/i/niogn)-pseudorandom, then for K = n for some constant c > 3 there exists 
instances G = {V,F) of DSk with m>n'^ such that it is not possible to decide in polynomial time if there 

is a solution of DSk with at least edges (the "yes" instance), or if every solution of DSk has 

(l-o(l))m ^ « „. 

at most edges (the no instance). 

Theorem 16.1. Under the technical assumption (*), DSI*(G,2, fc) cannot be approximated within a ratio 
of n^ for some constant 5 > even ifG is a DAG. 

Proof. Given an instance G = of DSx: as stated in (*), we construct an instance graph ^ = (T^, 

as follows: 

• For every node u £V, we have a node it € V^, and for every edge e = {ui ,U2, ■ ■ ■ ,Ud} € F , we have a 
node (also denoted by {ui,U2, ■ ■ ■ ,Ud\ ) in Thus, the total number of nodes of G is |\^| = m + «. 

• For every hyper-edge e = {ui,U2,. ■ ■ ,Ud) G F, we have d edges {e,ui), {e,U2),. ■ . , {e^Ud) G We set 
the weight (share of internal asset) of every edge (e,M, ) to 2. Thus, |/| = 1dm. 

Let the share of external assets for a node (bank) be denoted by (thus, L-^t^"^ = E). We 

will select the remaining network parameters as follows. For each e ^ F, E-^ = \.99d, and for each w G V, 
E-^ = 0. Thus, E = \.99dm. Finally, we set <I> = 1 and y = 1/2. We prove the following: 

(l-ho(l))m 

(completeness) If DSk- has a solution with a > — hyper-edges then then 
DSI* {^,2,Kj > K + a. 

„ (l-o(l))m 

(soundness) If every solution of DS^- has at most p = -^zr-^ — hyper-edges then 



DSI* ("^,2,k:) < JC + jS. 



n 2 
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Note that with c = 5 (and, thus m > rf), and sufficiently large d and n, we have 



l-£^ , (^+o{l))m 1 (1+0(1)), 

> (l-o(l))n'' 



K^ + i3 i_£^ , (l-o(l))m i_i (l-o(l)) 



which proves the theorem with 5 = i/d. 



Proof of Completeness (DSk: has a solution with a hyper-edges) 

Let y' C y be a solution of DS^ with at least a hyper-edges. We shock all the nodes in yshock = \ u G V'}. 
Every shocked node 17" fails at ? = 1 since <I> [b-jj; — i-^ +E-^) = 2degj^(l/") > deg;j^(l^) = 7 {b-^ +E-^). 
Now, consider a hyper-edge e = {ui,U2, - ■ ■ ,U4) & F such that ui,U2,---,Ud eV'. Then, the node fails at 
t = 2 since 

^tt degi„(^) 
Proof of Soundness (every solution of DSk: has at most j8 hyper-edges) 

We will prove the logically equivalent contrapositive of our claim, i.e. , we will show that if DSI* ^ , 2, > 
P + K then DSk has a solution of with strictly more than j3 hyper-edges. First, note that we can assume 
without loss of generaUty that, for any hyper-edge e G F, the node ~^ is not shocked. Otherwise, if we shock 
node then it does not fail since at ? = 1 since ^ {b-^ — l-^+E-^) = -0.0 W < 0.995^/ = 7 (b-^ + E-^), 
and in fact doing so increases its equity to 1.005 J. Since the equity of ~^ increased by shocking it, if this 
node failed in the given solution then it would also fail if it was not shocked. So, we can instead shock a 
node it that was not shocked in the given solution; such a node must exist since K <n. 

Note that we have already shown in the proof of the completeness part that, for any e = (wi , M2, . . . , wj) G 
F, if the d nodes wt , mI , • ■ • , are shocked then ~^ fails at ? = 2. Thus, our proof is complete provided we 
show that such a node ~^ does not fail at t = 2if at least one of the nodes wt , M2, ■ • ■ , Mrf is not shocked. Let 
5 C {mi , M2, • • ■ ,Ud} be the set of shocked nodes among these d nodes. Then, ~^ does not fail at ? = 2 since 



for all sufficiently large d. 



Limii <i I u-jit — lilt -\- c^-ff. \ — Y \ U-ff. -T ^7? ) , U-ff- f 
5^ — ^-^ , ^ <^-l< 0.995^ = 7^7^ 



17 Conclusions 

In this paper, we have formalized a model for idiosynchratic propagation of shocks to a banking network, 
defined two possible stability measures, provided their computational properties and discussed the implica- 
tions of our results on the banking system. We view our work as a necessary first step towards understanding 
vulnerabilities of banking systems due to sudden loss of external assets, and hope that it will generate suf- 
ficient interests in both the banking network community and the network algorithms community to further 
investigate and refine these stabihty issues. 
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